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In the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. Claims 1-14, 22, 30-31 and 37 were previously canceled. Please cancel 
claims 28-29, 32-33 and 44-46 without prejudice of the subject matter therein. No new 
claims have been added. No new matter has been added. 

1.-14. (Canceled) 

15. (Previously Presented) A method, comprising: 

receiving at a personal identification device a public key before biometric data 
associated with enrollment is received; 

sending an identifier from the personal identification device to a party based on 
the public key before biometric data associated with enrollments is received, the 
identifier being uniquely associated with the personal identification device; 

receiving at the personal identification device a digital certificate from the party 
based on the identifier before biometric data associated with enrollment is received; and 

disabling functionality within the personal identification device except that the 
personal identification device is in a wait state associated with fixture enrollment. 

1 6 (Previously Presented) The method of claim 1 5, further comprising sending the 
public key from the personal identification device to the party after the receiving the 
public key. 

17. (Previously Presented) The method of claim 15, wherein the receiving the digital 
certificate from the party is based on the public key and the identifier. 

1 8. (Previously Presented) The method of claim 15, wherein the identifier is 
associated with an asymmetric key pair including a personal identification device public 
key and a personal identification device private key. 
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1 9. (Previously Presented) The method of claim 15, further comprising producing the 
identifier at the personal identification device. 

20. (Previously Presented) The method of claim 15, further comprising receiving at 
the personal identification device the identifier from the party. 

2 1 . (Previously Presented) The method of claim 1 5, wherein the digital certificate 
includes the public key. 

22. (Canceled) 

23. (Previously Presented) A method, comprising: 
sending a public key to a personal identification device; 

receiving an identifier from the personal identification device, the identifier being 
uniquely associated with the personal identification device; 

producing a digital certificate based on the identifier and before enrollment of 
biometric data; and 

sending the digital certificate to the personal identification device such that 
ftinctionality of the personal identification device is disabled except that the personal 
identification device is configured to send the digital certificate to an enrollment party 
during future enrollment. 

24. (Previously Presented) The method of claim 23, wherein the producing of the 
digital certificate is based, at least in part, on the public key. 

25. (Previously Presented) The method of claim 23, wherein the receiving and the 
producing is performed by a first party, the method further comprising: 

receiving at the first party a digital certificate uniquely associated with a second 
party different from the first party; 
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adding a public key of the first party to the digital certificate associated with the 
second party; and 

sending the digital certificate associated with the second party fi-om the first party 
to the second party. 

26. (Previously Presented) The method of claim 23, wherein the digital certificate 
includes the public key. 

27. (Previously Presented) The method of claim 23, further comprising producing at 
the party an asymmetric key pair uniquely associated with the party. 

28. -33. (Canceled) 

34. (Previously Presented) A method, comprising: 

receiving an encryption identifier at a personal identification device from a party 
during pre-enroUment; 

receiving a digital signature at the personal identification device from the party 
during pre-enroUment; 

the encryption identifier and the digital signature collectively configured to enable 
verification of the party by the personal identification device; and 

disabling functionality within the personal identification device except for 
functionality associated with fixture enrollment. 

35. (Previously Presented) The method of claim 34, wherein: 
the encryption identifier is a public key; and 

the receiving the digital signature including receiving a digital certificate 
including the digital signature. 

36. (Previously Presented) The method of claim 34, wherein: 
the encryption identifier is a public key; and 
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the receiving the digital signature including receiving a digital certificate 
including the digital signature based on the public key. 

37. (Canceled) 

38. (Previously Presented) The method of claim 15, wherein the party is a 
manufacturer of the personal identification device and separate fi-om an enrollment party 
authorized to enable em-oUment of the biometric data at the personal identification 
device. 

39. (Previously Presented) The method of claim 1 5 wherein the party is a first party, 
the personal identification device being configured to enroll the biometric data from a 
second party different from the first party after the receiving at the personal identification 
device the digital certificate. 

40. (Previously Presented) The method of claim 15, wherein the digital certificate 
includes data associated with the personal identification device. 

41 . (Previously Presented) The method of claim 23, wherein the public key is 
associated with a manufacturer of the personal identification device and separate from the 
enrollment party authorized to enable enrollment of the biometric data at the personal 
identification device. 

42. (Previously Presented) The method of claim 23, wherein the personal 
identification device is configured to enroll biometric data firom the enrollment party after 
the sending the digital certificate. 

43. (Previously Presented) The method of claim 23, wherein the producing the digital 
certificate is based on data associated with the personal identification device. 
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44.-46. (Canceled) 

47. (Previously Presented) The method of claim 34, wherein the party is a 
manufacturer of the personal identification device. 

48. (Previously Presented) The method of claim 34, wherein the party is a first party, 
the personal identification device being configured to enroll biometric data from a second 
party different from the first party after the receiving the encryption identifier and after 
receiving the digital certificate. 

49. (Previously Presented) The method of claim 34, wherein the digital signature 
includes data associated with the personal identification device. 

50. (Previously Presented) The method of claim 15, wherein the wait state associated 
with future enrollment is a first wait state associated with fiiture enrollment. 

5 1 . (Previously Presented) The method of claim 23, wherein the future enrollment is a 
first future enrollment. 

52. (Previously Presented) The method of claim 34, wherein the future enrollment is a 
first fiiture enrollment. 



